remove obsolete cors middleware